outlook0fr[.]weebly[.]com

The domain outlook0fr.weebly.com was observed serving a 404 response and presenting the page title “. - .”. The site is hosted on IP 74.115.51.8, an address owned by Weebly, Inc. (AS27647) and located in the United States. DNS resolution is provided by four Amazon Route 53 name servers (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, ns-646.awsdns). TLS termination uses a Let’s Encrypt certificate issued by the E8 intermediate, indicating a publicly‑available certificate chain.

Cloudflare was detected as a supporting technology, suggesting the use of a CDN or reverse‑proxy service. The domain was created on 29 March 2006 and registered through Safenames Ltd. VirusTotal reports indicate that 14 of 95 scanned security vendors flagged the domain, and the domain appears on a single external blocklist that is actively used by PhishDestroy, which has already taken the site offline. The intelligence tags the site as a credential‑phishing campaign impersonating Outlook Web Access, and the associated scam type is “Credential Phishing”. No additional page content was captured, and the page title provides no further clues. Current analysis shows the infrastructure is modest, relying on a single IP address and widely‑available hosting services, which may be reused for other malicious actors.

Defenders should add outlook0fr.weebly.com to local DNS and proxy blocklists, monitor the resolved IP for new hostnames, and apply outbound filtering for traffic to the domain’s IP range. Continuous observation of the associated Amazon Route 53 name servers is recommended because they can be rapidly repointed to new malicious sites. Because the site is already marked offline, immediate threat to end users is reduced, but the host‑level indicators suggest a low barrier for re‑deployment.